Commits

Breadcrumbs

History for

ond71be8a

User selector

All users

All time

Commit History

Commits on Jul 11, 2024

• Moved from `experimental` into default queries

  aegilops

  committed
  d71be8a

  Copy full SHA for d71be8a

Commits on Jul 9, 2024

• Moved new query to 'experimental'

  Show description for 86afd54
  aegilops

  committed
  86afd54

  Copy full SHA for 86afd54

Commits on Jul 1, 2024

• Fixed wrong name for example HTML

  aegilops

  committed
  b4d8c48

  Copy full SHA for b4d8c48

• Added full stop to end of message

  aegilops

  committed
  1744a98

  Copy full SHA for 1744a98

• Fixed ending <p> tags

  aegilops

  committed
  ceda46e

  Copy full SHA for ceda46e

• Added detection for specific Polyfill.io CDN compromise - edited existing library and added new query and tests

  aegilops

  committed
  a1b0703

  Copy full SHA for a1b0703

Commits on May 16, 2024

• add an example of how to get a floating point value between 0 and 1

  erik-krogh

  committed
  56dff85

  Copy full SHA for 56dff85

• RandomSource is deprecated, it's crypto now

  erik-krogh

  committed
  066f3b6

  Copy full SHA for 066f3b6

Commits on May 3, 2024

• add qhelp recommendation that you can use an obvious placeholder value

  erik-krogh

  committed
  39a8b49

  Copy full SHA for 39a8b49

• exclude credentials as kind `key` from hardcoded-credentials when the key looks like a dummy password

  erik-krogh

  committed
  ff85db3

  Copy full SHA for ff85db3

Commits on Apr 25, 2024

• delete outdated deprecations

  erik-krogh

  committed
  baa31e1

  Copy full SHA for baa31e1

Commits on Nov 30, 2023

• Remove unwanted period from query name

  Show description for 4cb2f53
  felicitymay

  authored
  4cb2f53

  Copy full SHA for 4cb2f53

Commits on Nov 21, 2023

• Apply suggestions from code review

  Show description for dfffa1e
  

  max-schaefer

  and

  sabrowning1

  authored
  dfffa1e

  Copy full SHA for dfffa1e

Commits on Nov 20, 2023

• Update qhelp for js/path-injection.

  

  Max Schaefer

  committed
  d147fab

  Copy full SHA for d147fab

Commits on Nov 14, 2023

• Merge branch 'main' into rvermeulen/javascript-adjust-security-severity

  rvermeulen

  authored
  52540b4

  Copy full SHA for 52540b4

• Restore XssThroughDom.ql's severity

  rvermeulen

  authored
  6bd7047

  Copy full SHA for 6bd7047

Commits on Oct 27, 2023

• Address review comment.

  

  Max Schaefer

  committed
  104700f

  Copy full SHA for 104700f

Commits on Oct 26, 2023

• Port changes to JavaScript.

  

  Max Schaefer

  committed
  741735c

  Copy full SHA for 741735c

Commits on Oct 10, 2023

• delete an .expected file outside the test directories

  erik-krogh

  committed
  ccd06c7

  Copy full SHA for ccd06c7

Commits on Oct 9, 2023

• Adjust query severities

  rvermeulen

  committed
  76e56cd

  Copy full SHA for 76e56cd

Commits on Sep 14, 2023

• Merge pull request #13641 from erik-krogh/multi-char

  Show description for 7e7852e
  erik-krogh

  authored
  7e7852e

  Copy full SHA for 7e7852e

Commits on Sep 13, 2023

• Merge pull request #13771 from github/max-schaefer/server-side-url-redirect-help

  Show description for e722e32
  max-schaefer

  authored
  e722e32

  Copy full SHA for e722e32

Commits on Sep 12, 2023

• Make suggestion to replace example.com more explicit.

  

  Max Schaefer

  committed
  a9e8167

  Copy full SHA for a9e8167

• Apply suggestions from code review

  Show description for 7ddb7da
  

  max-schaefer

  and

  felicitymay

  authored
  7ddb7da

  Copy full SHA for 7ddb7da

Commits on Sep 7, 2023

• Explain about redirects to example.com.

  

  Max Schaefer

  committed
  46d7165

  Copy full SHA for 46d7165

Commits on Sep 6, 2023

• Use better sanitiser.

  

  Max Schaefer

  committed
  a02f373

  Copy full SHA for a02f373

Commits on Aug 21, 2023

• Use more sensible validator in example.

  

  Max Schaefer

  committed
  8736413

  Copy full SHA for 8736413

Commits on Aug 10, 2023

• change the defaults in the qhelp for missing-rate-limit to something more reasonable

  erik-krogh

  committed
  5ffce86

  Copy full SHA for 5ffce86

Commits on Aug 7, 2023

• re-appearing -> reappearing

  Show description for 6631e83
  

  erik-krogh

  and

  mattpollard

  authored
  6631e83

  Copy full SHA for 6631e83

Commits on Aug 1, 2023

• Update javascript/ql/src/Security/CWE-730/ServerCrash.qhelp

  Show description for 5124310
  

  max-schaefer

  and

  asgerf

  authored
  5124310

  Copy full SHA for 5124310

Commits on Jul 19, 2023

• JavaScript: Improve query help for `js/server-side-unvalidated-url-redirection`.

  

  Max Schaefer

  committed
  7823ff9

  Copy full SHA for 7823ff9

Commits on Jul 17, 2023

• JavaScript: Improve qhelp for js/server-crash.

  Show description for 9432fec
  

  Max Schaefer

  committed
  9432fec

  Copy full SHA for 9432fec

Commits on Jul 13, 2023

• suggestions based on review: add a popular library example for HTML-sanitization, and use the old text about ../ replacements

  erik-krogh

  committed
  1fe6623

  Copy full SHA for 1fe6623

• apply suggestion from review

  Show description for 9db970f
  

  erik-krogh

  and

  max-schaefer

  authored
  9db970f

  Copy full SHA for 9db970f

• Apply suggestions from code review

  Show description for ae23724
  

  max-schaefer

  and

  subatoi

  authored
  ae23724

  Copy full SHA for ae23724